More Details on Apple's Security Update 2004-1-26

released yesterday afternoon. It's available via the Software Update preference panel and as a standalone installer:

• Mac OS X 10.3.2 Server
• Mac OS X 10.3.2
• Mac OS X 10.2.8
• Mac OS X 10.15 Client or Server
• Mac OS X 10.2.8 Server

Mail is updated to 1.3.3 Build 612 and Safari is updated to 1.1.1 Build 100.1. Here are the details from Apple:

• AFP Server: Improves AFP over the 2003-12-19 security update.
  
• Apache 1.3: Fixes CAN-2003-0542, a buffer overflow in the mod_alias and mod_rewrite modules of the Apache webserver.
  
• Apache 2: Fixes CAN-2003-0542 and CAN-2003-0789 by updating Apache 2.0.47 to 2.0.48. Installed only on Server systems.
  
• Classic: Fixes CAN-2004-0089 to improve the handling of environment variables. Credit to Dave G. of @stake for reporting this issue.
  
• Mail: Fixes CAN-2004-0085 and CAN-2004-0086 to deliver security enhancements to Apple's mail application. Credit to Jim Roepcke for reporting CAN-2004-0086.
  
• Safari: Fixes CAN-2004-0092 by delivering security enhancements tothe Safari web browser.
  
• System Configuration: Fixes CAN-2004-0087 and CAN-2004-0088 where the SystemConfiguration subsystem allowed remote non-admin users to change network setting and make configuration changes to configd. Credit to Dave G. from @stake for reporting these issues.
  
• Windows File Sharing: Fixes CAN-2004-0090 where Windows file sharing did not shutdown properly.